1ff0d57e4f3544a7f7e9fc56f76cf76e5d25e1ddc7a897f9d901c677a26e6d63 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ff0d57e4f3544a7f7e9fc56f76cf76e5d25e1ddc7a897f9d901c677a26e6d63
Size

394KB
MD5

8829114ebcff732702042d168e76aede
SHA1

e3412a86fce626255aa4f2b2008936f8f3da1df8
SHA256

1ff0d57e4f3544a7f7e9fc56f76cf76e5d25e1ddc7a897f9d901c677a26e6d63
SHA512

1e4854426a6f7691e64190d55dfbfa8daa285fd7c6d8071cd9a39f4f188c2075ca43d12281cee21c6b7f81212541e9a03ab3bc10677c9e746e508ec6561936b0
SSDEEP

6144:5uHOJrG1VVE+Iel+lXDZJfLufs73dOk0XDpNjNOpys8k/UOPSe570Szp3y:gO9ureZJys73dOvXDpNjNe8zOB0H

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

1ff0d57e4f3544a7f7e9fc56f76cf76e5d25e1ddc7a897f9d901c677a26e6d63
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ